CVE-2023-4059

—

CVSS 3.1

4.3 medium

EPSS

<1%p14

Published

Sep 4, 2023 (Sep 4, 2023)

Modified

Jun 17, 2026

Description

The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the register, log-in and edit-profile pages from the plugin on the blog

Vendors: cozmoslabs
Products: profile builder
Ecosystems: WordPress
Weakness: CWE-352, CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.